$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft File: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft (raw, json) Hash identifier: tRkhDOk0rmDH5saimGOlpMgfizz6G9HhzzDkRmf4QqE= Subject key identifier: 5D:F4:94:AB:2D:89:16:6F:F3:EE:B9:84:C5:D0:E1:BA:D1:EF:96:D5 Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Certificate serial: 52C97C739AD0B7D81FF3E8663666F73C2B834152 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft Manifest number: 0156 Signing time: Wed 16 Apr 2025 05:28:05 +0000 Manifest this update: Wed 16 Apr 2025 05:23:05 +0000 Manifest next update: Thu 17 Apr 2025 05:54:05 +0000 Files and hashes: 1: 3230302e3233332e33362e302f32322d3332203d3e20323633303835.roa (hash: OaBqNKojikmJPtORza2BT6bwUtoaHkvHJGDrJ6TT0Jk=) 2: 323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (hash: lB9qjGVhNhF5lJJzZDhsXssryZPQSWcU0WlF69K5CGw=) 3: 3134332e3230322e3138382e302f32322d3332203d3e20323633303835.roa (hash: rfuLdgMvv0HDJvfNzKp1BkSRrExLo8kMHJmGjgClIHQ=) 4: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (hash: QcLBn2FW6MS06pj928K1BAwy2EGURY5KlgXU3hN1hmI=) 5: 3138362e3233332e3231362e302f32322d3332203d3e20323633303835.roa (hash: dUKJbgwSBEnhqYt7sRu5Q8zzxeZ2QKEPAxSb/41Rrzw=) 6: 1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl (hash: Cbr+b5TmkBXVvVP4fUspr4ha1y/S3xNSwP2kgm6uRBs=) 7: 323830343a3936633a3a2f33322d3332203d3e20323633303835.roa (hash: fIcSU5Nj5GaUIL8yma9QszHx5QrEL/vnDBk6PqSgXVY=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 17 Apr 2025 05:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c9:7c:73:9a:d0:b7:d8:1f:f3:e8:66:36:66:f7:3c:2b:83:41:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822 Validity Not Before: Apr 16 05:23:05 2025 GMT Not After : Apr 17 05:54:05 2025 GMT Subject: CN=5DF494AB2D89166FF3EEB984C5D0E1BAD1EF96D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:d2:53:f9:0c:2a:99:a1:1b:30:5d:3a:ad: 57:0a:99:cf:af:07:77:91:15:43:72:1b:bd:64:60: 00:dc:10:ff:68:66:21:db:f9:a4:fe:a4:85:96:22: f6:27:2c:8b:0d:ba:52:cb:f4:39:2c:28:25:3f:8a: 8d:47:ef:5f:4b:12:7d:e6:09:96:55:a5:47:2c:4b: 40:47:a7:48:a7:ee:4d:dc:0a:03:a3:4f:2c:23:06: 08:53:47:3d:a1:28:ad:1d:24:24:16:12:a6:52:a8: ba:3c:8b:c8:a1:9e:5a:46:e4:fc:07:b5:0a:1d:22: f2:54:b8:db:dd:a7:b1:ea:8b:ee:75:b5:e7:5c:30: 8a:80:94:6b:cd:99:ff:21:d1:95:4f:6f:93:fc:9d: 73:70:36:a5:96:b7:30:0b:5b:e5:7b:5b:f6:3e:c9: 6b:06:5f:3c:41:63:ec:da:95:13:52:9b:ea:51:44: a0:d2:1b:38:bd:e7:a8:80:a4:00:9b:2a:31:ea:4a: 58:90:6b:4f:5d:a8:78:dc:5c:ae:83:f5:79:e9:6e: 8d:87:d9:56:36:f8:a4:54:61:9e:5f:1a:7e:3f:6c: 0a:69:1e:f9:93:94:f1:15:30:94:21:97:e1:b7:63: f0:60:d0:e7:23:a0:71:9d:27:a1:fb:30:7f:68:82: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F4:94:AB:2D:89:16:6F:F3:EE:B9:84:C5:D0:E1:BA:D1:EF:96:D5 X509v3 Authority Key Identifier: keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5a:86:b0:bf:fa:ff:3e:ee:c3:a2:e8:4c:3b:f1:c8:5f:ee: 40:85:12:8d:80:bb:04:60:1f:84:88:c9:70:43:2a:d8:74:e4: c2:8a:ff:57:3b:67:53:24:48:d8:c1:65:ab:a8:f5:24:4f:02: 8b:33:26:9f:f7:75:18:5a:77:90:06:af:13:29:e8:5a:32:2a: 34:16:01:51:22:df:1e:e6:f0:ff:9b:77:5e:ff:c8:46:4d:40: 47:0a:c2:9c:c1:a2:67:a7:f9:8f:b4:28:13:12:db:b8:ce:db: 5c:92:bb:16:d8:e9:30:fd:cf:f0:04:2a:7e:ea:23:ec:4c:16: f0:2a:5f:10:be:c9:e4:84:1f:cd:fc:a1:d6:91:e8:23:e9:26: 8c:8e:5c:68:a8:44:36:44:11:81:6c:79:1d:57:59:88:87:1f: e4:5d:ba:be:37:1c:75:61:72:e9:37:ed:69:7f:3a:6f:c2:df: b4:14:3c:93:73:3b:93:49:b0:c3:4d:bd:72:f1:76:ae:37:2d: 12:e9:8c:35:4b:a0:47:89:08:54:06:df:99:80:54:26:06:1c: 65:d3:c7:bf:bd:44:01:44:c2:03:bd:3c:cd:13:7b:74:46:98: f1:32:c2:2f:cf:c8:aa:d9:fe:72:91:da:f4:be:c1:2d:6e:bc: 02:f1:c1:22 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIUUsl8c5rQt9gf8+hmNmb3PCuDQVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3 QkQzQTgyMjAeFw0yNTA0MTYwNTIzMDVaFw0yNTA0MTcwNTU0MDVaMDMxMTAvBgNV BAMTKDVERjQ5NEFCMkQ4OTE2NkZGM0VFQjk4NEM1RDBFMUJBRDFFRjk2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTjdJT+QwqmaEbMF06rVcKmc+v B3eRFUNyG71kYADcEP9oZiHb+aT+pIWWIvYnLIsNulLL9DksKCU/io1H719LEn3m CZZVpUcsS0BHp0in7k3cCgOjTywjBghTRz2hKK0dJCQWEqZSqLo8i8ihnlpG5PwH tQodIvJUuNvdp7Hqi+51tedcMIqAlGvNmf8h0ZVPb5P8nXNwNqWWtzALW+V7W/Y+ yWsGXzxBY+zalRNSm+pRRKDSGzi956iApACbKjHqSliQa09dqHjcXK6D9Xnpbo2H 2VY2+KRUYZ5fGn4/bAppHvmTlPEVMJQhl+G3Y/Bg0OcjoHGdJ6H7MH9ogtHrAgMB AAGjggJWMIICUjAdBgNVHQ4EFgQUXfSUqy2JFm/z7rmExdDhutHvltUwHwYDVR0j BBgwFoAUGp+jfzmuH/VUIs0epN3CLHvTqCIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv cmVwby9mU3VkTTRFTXdLSEV3OXc1aXVwcHlhbmlFNFVFZVRlM3pBaVByR3N4TENZ LzAvMUE5RkEzN0YzOUFFMUZGNTU0MjJDRDFFQTREREMyMkM3QkQzQTgyMi5jcmww eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8xQTlGQTM3RjM5QUUxRkY1NTQy MkNEMUVBNEREQzIyQzdCRDNBODIyLmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL2ZT dWRNNEVNd0tIRXc5dzVpdXBweWFuaUU0VUVlVGUzekFpUHJHc3hMQ1kvMC8xQTlG QTM3RjM5QUUxRkY1NTQyMkNEMUVBNEREQzIyQzdCRDNBODIyLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA OlqGsL/6/z7uw6LoTDvxyF/uQIUSjYC7BGAfhIjJcEMq2HTkwor/VztnUyRI2MFl q6j1JE8CizMmn/d1GFp3kAavEynoWjIqNBYBUSLfHubw/5t3Xv/IRk1ARwrCnMGi Z6f5j7QoExLbuM7bXJK7FtjpMP3P8AQqfuoj7EwW8CpfEL7J5IQfzfyh1pHoI+km jI5caKhENkQRgWx5HVdZiIcf5F26vjccdWFy6TftaX86b8LftBQ8k3M7k0mww029 cvF2rjctEumMNUugR4kIVAbfmYBUJgYcZdPHv71EAUTCA708zRN7dEaY8TLCL8/I qtn+cpHa9L7BLW68AvHBIg== -----END CERTIFICATE-----Generated at Thu Apr 17 02:34:17 2025 by rpki-client